NeVibeCode · 1,434 items
Skills for Security
Skills for Security: what each one does, an install command and example prompts.
iso27001-audit-prep skill Prepares your ISMS for ISO 27001 internal, surveillance, or stage 1 certification audits. It runs a 6-question sample-driven interrogation across core controls.
22installs
chainlink-ace-skill skill A skill for Chainlink ACE work: PolicyEngine, Cross-Chain Identity, KYC and AML, sanctions screening, and onchain compliance rules.
CX Codex +1
310installs
rate-limiting-implementation skill A skill that walks your agent through adding rate limiting, quotas and backpressure to a service. Useful when an API is public or traffic keeps growing.
CX Codex +1
502installs
electron-best-practices skill A skill that steers an AI agent through Electron apps with React: security defaults, typed IPC, packaging and signing. Useful whenever the agent writes main, preload or renderer code.
CX Codex +1
820installs
ssl-certificate-management skill Automates SSL/TLS certificate provisioning, renewal, and monitoring using Let's Encrypt, AWS ACM, or Vault. Keeps production HTTPS running without manual overhead.
CX Codex +1
500installs
rust-security skill A skill that walks an agent through Rust security work: cargo-audit, cargo-deny, RUSTSEC advisories, safe FFI, fuzzing and Miri.
CX Codex +1
544installs
ethereum skill Gives your agent a rulebook for Ethereum smart contracts: security patterns, OpenZeppelin integration, Hardhat tests.
CX Codex +1
737installs
shannon-ai-pentester skill A white-box pentester that reads your source, runs live exploits against a running app, and reports only findings it can reproduce.
CX Codex +1
1,700installs
k9-ownership-byod-setup skill Builds a Datadog ownership preferences CSV and walks you through uploading it. Useful when the Ownership Agent guesses the wrong resource owners.
CX Codex +1
454installs
infisical-secret-syncs skill This skill guides Secret Sync setup from Infisical to third-party services. Use it for AWS, GitHub, Vercel, and other supported destinations.
CX Codex +1
895installs
solana skill Guides AI agents in writing Solana programs using Rust and Anchor, covering account validation, PDA handling, and Web3.js integration.
CX Codex +1
725installs
blockchain skill Development guidelines for CosmWasm smart contracts and Cosmos cross-chain patterns. Focuses on Rust safety, IBC messaging, and gas efficiency.
CX Codex +1
724installs
rust-sanitizers-miri skill Guides agents through validating unsafe Rust code using Miri and LLVM sanitizers. Helps uncover undefined behavior, memory leaks, and thread data races.
CX Codex +1
527installs
solidity skill A skill for writing and reviewing Solidity contracts: reentrancy defenses, gas optimization, testing, and React frontend wiring.
CX Codex +1
721installs
oauth-implementation skill Guides coding agents through OAuth 2.0 and 2.1 setup with PKCE, state checks, and token rotation. Built to prevent insecure grants like implicit flow.
CX Codex +1
719installs
zero-trust-architecture skill Guides AI coding agents to implement Zero Trust security with identity verification and microsegmentation. Useful for cloud-native apps.
CX Codex +1
482installs
code-reviewer skill Reviews Git diffs and pull requests for security vulnerabilities, logic flaws, test coverage, and code quality.
CX Codex +1
749installs
stripe skill Integration rules for Stripe in TypeScript, React and Next.js: server-side payments, subscriptions, webhooks. Useful when your agent writes checkout code.
CX Codex +1
704installs
terraform skill Guides the agent on writing clean Terraform configurations, managing remote state locks, and storing secrets across cloud environments.
CX Codex +1
702installs
auth0-authentication skill A skill that gives your coding agent Auth0 guidelines: auth flows, Actions, token validation and redirect safety.
CX Codex +1
700installs
dd-audit-ai-activity skill Reads the Datadog Audit Trail and shows which users called Datadog MCP tools, what those calls touched, and which events look off.
CX Codex +1
433installs
graphql skill This skill guides GraphQL schema, query, mutation, and client work. Use it when an API needs typed patterns and query-performance checks.
CX Codex +1
684installs
clerk-authentication skill Rules for wiring Clerk into Next.js: middleware, hooks, protected server actions and API routes. Useful once your app already runs on Clerk.
CX Codex +1
683installs
azure skill Sets Azure development rules covering Bicep templates, Azure Pipelines, AKS security, and monitoring practices for coding agents.
CX Codex +1
675installs
frontend-react-router-best-practices skill React Router architecture and performance rules for coding agents. Teaches models to write parallel loaders and secure mutation handlers without client waterfalls.
CX Codex +1
401installs
infisical-agent skill Walks you through setting up the Infisical Agent daemon: auth, YAML config, Go templates and rendering secrets to files. Useful when your app reads a config file.
CX Codex +1
813installs
Docker Configuration Validator skill Validates Dockerfiles and Docker Compose files for security, syntax and modern requirements. Useful before shipping to production.
CX Codex +1
336installs
pocketbase-best-practices skill A skill with 64 PocketBase rules covering collections, API rules, auth, queries and deployment. Useful when an agent writes your backend and gets access control wrong.
CX Codex +1
855installs
binary-hardening skill Configures security flags for C and C++ builds, inspects binaries with checksec, and sets up seccomp-bpf syscall filtering.
CX Codex +1
471installs
nansen-wallet-keychain-migration skill Migrates nansen-cli wallet passwords from plain text files and env vars into your OS keychain. Eliminates security warnings and verifies wallet decryption.
CX Codex +1
352installs
codex-memory-curator skill Audits and curates Codex memory to eliminate stale entries, duplicate claims, and leaked credentials. Helpful when agent memory gets cluttered, contradictory, or bloated.
CX Codex +1
2,700installs
skill-guard skill Watches active OpenClaw skills: which files they touch, where they connect, what they run in the shell. Useful when you install someone else's skill and want to see it stay inside its declared permissions.
CX Codex +1
573installs
legal-compliance skill Equips coding agents with structured frameworks for corporate governance, contract review, and compliance across GDPR, HIPAA, and SOX.
CX Codex +1
377installs
clawhub-skill-vetting skill Audits ClawHub skills before installation by checking code, permissions, activity, and red flags. Use it when a skill’s trust level is uncertain.
CX Codex +1
1,600installs
fda-qsr-audit-prep skill Runs six FDA 21 CFR 820 audit questions before an internal QSR audit, an inspection, or a Form 483 response.
17installs
infisical-dynamic-secrets skill Guides the configuration of on-demand, ephemeral credentials across 30 Infisical providers. Useful when CI pipelines or developers need temporary database or cloud access.
CX Codex +1
721installs
prompt-guard skill This skill scans skill files, user messages and external data for attempts to hijack an agent's instructions. Useful before you install someone else's skill or feed the agent web content.
CX Codex +1
546installs
supabase-pentest skill Runs a phased security audit of a Supabase app: finds leaked keys, checks access, and writes evidence to files as it goes.
CX Codex +1
698installs
openai-platform-api-key
official skill Checks for an OpenAI key before API-backed work and guides secure OPENAI_API_KEY setup. Useful when Codex builds or runs an AI tool.
CX Codex GP ChatGPT
16installs
api-authentication skill A skill that helps your coding agent write API authentication: JWT, OAuth 2.0, API keys, sessions and security headers.
CX Codex +1
533installs
1,201–1,240 of 1,434
